Splunk Enterprise

Splunk Enterprise
Community Activity
Splunk_U
I want to show the CPU util average and maximum via perfmon.conf file. Is that possible?
by Splunk_U Path Finder in Splunk Enterprise 01-15-2013
1 10
1
10
AaronGRMEP
I want to forward specific events from the Security log on a Windows server to my full Splunk install. I've looked t...
by AaronGRMEP Explorer in Splunk Enterprise 01-09-2013
1 5
1
5
bcurtiss
I'm trying to get a splunk forwarder running on a linux box, but when I try to tell the forwarder to forward to a spe...
by bcurtiss Engager in Splunk Enterprise 01-08-2013
0 4
0
4
code_nomad
is there any way to delete/remove indexed data for a particular time range ? thanks in advance.
by code_nomad New Member in Splunk Enterprise 12-27-2012
0 5
0
5
theouhuios
Hello I need to extract total from Mem and free from buffers/cache. Any idea on how do I do that? total ...
by theouhuios Motivator in Splunk Enterprise 12-13-2012
0 5
0
5
the_wolverine
Is one preferred over the other?
by the_wolverine Champion in Splunk Enterprise 11-21-2012
0 6
0
6
xchang1226
I am trying to display some performance metrics like cpu and memory using sparkline, the search is something like thi...
by xchang1226 Path Finder in Splunk Enterprise 11-18-2012
0 3
0
3
lbogle
Hello Splunkers, I need to move my indexes on my Linux Indexer (v5.0) over to another location on the box w/ more HD ...
by lbogle Contributor in Splunk Enterprise 11-12-2012
0 4
0
4
rmurthy
Hi, I want to run a subsearch, pass the host and _time to the main search. The main search will look for some other ...
by rmurthy Engager in Splunk Enterprise 11-09-2012
1 2
1
2
bdsys
I new install of Splunk 4.2 on Ubuntu ver. 11 went flawlessly. I went to .:8000 and only the "Splunk>" logo would app...
by bdsys Explorer in Splunk Enterprise 11-07-2012
0 2
0
2
abhayneilam
Hi, I am getting the following error, kindly let me know what can be done if this error comes again and my searching ...
by abhayneilam Contributor in Splunk Enterprise 11-02-2012
0 2
0
2
rayfoo
Googling for "splunk delete index" turns up http://www.splunk.com/base/Documentation/3.3/User/DeleteAnIndex Which g...
by rayfoo Path Finder in Splunk Enterprise 10-15-2012
5 14
5
14
ftk
I've installed the pdf_server app on my server, but firefox fails to generate the PDF. I have installed all prerequis...
by ftk Motivator in Splunk Enterprise 10-11-2012
1 5
1
5
obesechicken13
Hi. I'm trying to recreate a splunk index. The index exists in the http search url. https://splunk.mycompany.com/en-U...
by obesechicken13 Explorer in Splunk Enterprise 09-13-2012
0 6
0
6
eidur
Hi all, We have enabled data block signing as described in http://docs.splunk.com/Documentation/Splunk/latest/admin/...
by eidur Engager in Splunk Enterprise 09-05-2012
0 3
0
3
caphrim007
Is there a URL on splunk.com that I could poll periodically that just reports the latest available version of splunk ...
by caphrim007 Path Finder in Splunk Enterprise 09-04-2012
2 4
2
4
mslvrstn
A file on my Windows boxes (running the Universal Forwarder) is being ignored because it has some bogus non-ASCII cha...
by mslvrstn Communicator in Splunk Enterprise 08-30-2012
1 3
1
3
nebel
Hi, I have a lot of forwarders. I want to make sure that the forwarders got the right app. I did some searches but c...
by nebel Communicator in Splunk Enterprise 08-29-2012
0 5
0
5
wildbill4
Getting the following when I try to start splunkd: "/opt/splunk/bin/splunkd Error while loading shared libraries: li...
by wildbill4 Path Finder in Splunk Enterprise 08-17-2012
1 5
1
5
alertsuser
If I use the Main index and using a Universal Forwarder I successfully index all event data in the Application, Syste...
by alertsuser New Member in Splunk Enterprise 08-10-2012
0 1
0
1
bluecloud
how do i prefix data comming from a Universal Forwarder... basically i want data comming from a collector at a client...
by bluecloud New Member in Splunk Enterprise 08-04-2012
0 3
0
3
matthewparry
Hi, I am trying to use a different timestamp located in the event data. This is a UDP input on a forwarder which I h...
by matthewparry Path Finder in Splunk Enterprise 07-31-2012
0 8
0
8
Hazel
Hello I am trying to extract specific sections from my xml file in props.conf into events. The events should look l...
by Hazel Communicator in Splunk Enterprise 06-11-2012
0 1
0
1
p544gm
I am trying to find a way to get a count of forwarders that are providing logs to my splunk environment. I am new to ...
by p544gm Explorer in Splunk Enterprise 04-25-2012
0 1
0
1
mikelanghorst
I'm attempting to use the user-seed.conf to set the admin password for my Windows Universal Forwarder installations, ...
by mikelanghorst Motivator in Splunk Enterprise 04-24-2012
3 3
3
3
Get Updates on the Splunk Community!

Free Professional Services for .conf26 Attendees

This year at .conf26, we are doing something a little different. We are bringing the best minds from ...

Defend at Machine Speed: Your Guide to Security Sessions at .conf26

Splunk .conf26   With threats moving at machine speed and attack surfaces expanding across hybrid ...

Where Innovation Takes Flight: The Splunk4Aviation Flight Sim Lands at .conf26

If you hear someone at .conf26 shouting "gear down, GEAR DOWN" across the show floor, you have found us.  The ...
Top Solution Authors